CVE-2026-70719

MediumCVSS 4.0

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access can gain unauthorized read access to a subset of data. The attack is easy to exploit.

Risk Assessment

The risk is unauthorized access to part of calculation data, potentially compromising confidentiality.

Recommendation

Apply Oracle patches and restrict local access to the Calculation Manager system.

Original NVD description (English source)

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).